Index: etc/defaults/rc.conf =================================================================== RCS file: /home/ncvs/src/etc/defaults/rc.conf,v retrieving revision 1.159 diff -u -r1.159 rc.conf --- etc/defaults/rc.conf 5 Sep 2002 20:14:40 -0000 1.159 +++ etc/defaults/rc.conf 28 Oct 2002 10:30:53 -0000 @@ -311,6 +311,10 @@ ipv6_firewall_quiet="NO" # Set to YES to suppress rule display ipv6_firewall_logging="NO" # Set to YES to enable events logging ipv6_firewall_flags="" # Flags passed to ip6fw when type is a file +ipv6_ipfilter_rules="/etc/ipf6.rules" # rules definition file for ipfilter, + # see /usr/src/contrib/ipfilter/rules + # for examples +ipv6_ipfilter_flags="" # additional flags for ipfilter ############################################################## ### System console options ################################# Index: etc/rc.network =================================================================== RCS file: /home/ncvs/src/etc/rc.network,v retrieving revision 1.137 diff -u -r1.137 rc.network --- etc/rc.network 20 Sep 2002 18:31:55 -0000 1.137 +++ etc/rc.network 28 Oct 2002 10:30:54 -0000 @@ -101,10 +101,20 @@ esac case "${ipfilter_enable}" in [Yy][Ee][Ss]) - if [ -r "${ipfilter_rules}" ]; then + if [ -r "${ipfilter_rules}" -o \ + -r "${ipv6_ipfilter_rules}" ]; then echo -n ' ipfilter' - ${ipfilter_program:-/sbin/ipf} -Fa -f \ - "${ipfilter_rules}" ${ipfilter_flags} + ${ipfilter_program:-/sbin/ipf} -Fa + if [ -r "${ipfilter_rules}" ]; then + ${ipfilter_program:-/sbin/ipf} \ + -f "${ipfilter_rules}" \ + ${ipfilter_flags} + fi + if [ -r "${ipv6_ipfilter_rules}" ]; then + ${ipfilter_program:-/sbin/ipf} -6 \ + -f "${ipv6_ipfilter_rules}" \ + ${ipv6_ipfilter_flags} + fi else ipfilter_enable="NO" echo -n ' NO IPF RULES'